[SECURITY] [DLA 368-1] grub2 security update

2015-12-12T17:36:05
ID DEBIAN:DLA-368-1:37E52
Type debian
Reporter Debian
Modified 2015-12-12T17:36:05

Description

Package : grub2 Version : 1.98+20100804-14+squeeze2 CVE ID : CVE-2015-8370 Debian Bug : #807614

Hector Marco-Gisbert, from the Universitat Politècnica de València Cybersecurity Team, reported a buffer overflow in grub2 when checking password during bootup.

For Debian 6 "Squeeze", this problem has been fixed in grub2 version 1.98+20100804-14+squeeze2. We recommend you to upgrade your grub2 packages.

Learn more about the Debian Long Term Support (LTS) Project and how to apply these updates at: https://wiki.debian.org/LTS/